Data you give us. We use this information:
Legal basis. We will only collect, use and share your personal data where we are satisfied that we have an appropriate legal basis to do this. The legal basis we rely upon may impact which rights you have in relation to your personal data (see “Your Rights” below for more information). The legal bases we rely upon are:
Legitimate interests. Where the above do not apply, we will have established a legitimate interest to process your personal data for a purpose described in this policy, and will ensure that our interest is not overridden by your rights and freedoms. For example, we have a legitimate intrest in:
Our approach is to only retain personal data for as long as is necessary to satisfy the relevant purpose(s) set out in this policy, subject to the following exceptions.
We will hold information required to maintain accurate company and accounting records (e.g. records of transactions) for 6 years, after which it will be destroyed.
We will continue to retain personal data where it is necessary for us to establish, exercise or defend legal claims, for example to enforce our contracts or to defend claims from or involving you.
If you apply for a job with us and are unsuccessful, we will retain your application and personal data for a period of no more than 12 months from our last communication, in order to consider you for future positions and for reporting purposes.
Where we store your data. We are a UK based company, and primarily your data will be stored and processed in the UK. However, some of our service providers store and process data outside of the UK and the European Economic Area (“EEA”), for example in Russia. Not all countries outside of the UK and EEA have equivalent data protection laws to the UK and EEA, and consequently we have taken steps to ensure that service providers who may process your personal information outside the EEA have put in place appropriate measures to protect your data, such as by entering into a standard contractual clauses approved by the EU Commission or a relevant supervisory authority. In non-routine circumstances, we may rely on a derogation available under data protection laws to transfer your personal information outside of the UK and EEA without the aforementioned measures in place. You have a right to see a copy of any agreement under which your personal information is transferred outside of the EEA, although this may be redacted for reasons of commercial sensitivity.
You have the following rights in relation to your personal data. Please note that some of these rights are dependent on our legal basis for processing your personal data, as explained above. Each right is also subject to exemptions, and we will inform you if we rely on one or more of these. Finally, when you make a request we may be required to take steps to confirm your identity.
If you’d like to exercise any of these rights you can email us at firstname.lastname@example.org
You also have the right, at any time, to complain to your supervisory authority. In the UK this is the Information Commissioner’s Office. However, we ask that if you are unhappy you try to resolve this with us first – we will do our best to help.
Copyright NZT Ltd 2023. OneCity is the trading name of NZT Ltd, registered in England and Wales No. 9602870 with registered address at 124 City Road, London EC1V 2NX, UK.